Questions tagged [rogue-ap]

A rogue AP is an unauthorized wireless access point placed on a network to allow access to the network it is attached to.

Filter by
Sorted by
Tagged with
0 votes
1 answer
87 views

Suspected Audio/Wireless/Bluetooth Hijacking - Need Expert Insight [closed]

I have reason to believe that there may be ongoing audio/wireless/Bluetooth hijacking occurring in my network environment. The issue appears to involve unauthorized access to Bluetooth and wireless ...
Jimmy's user avatar
  • 1
0 votes
1 answer
339 views

Can an attacker perform MiTM attacks on non-web based clients such as Microsoft Outlook using a Rogue Access Point?

I understand an attacker could perform MiTM on Rogue Access Points and capture cleartext traffic between a web client and server. However, is it possible that an attacker could do similar MiTM attacks ...
sxmad's user avatar
  • 115
4 votes
2 answers
224 views

Is it foolish to trust a Wi-Fi network just because it uses a specific recognized SSID?

This article in the Avira (part of NortonLifeLock) security blog discusses (vaguely) security risks of public Wi-Fi. The article states: Man in the middle attacks are also a very prominent threat, ...
End Anti-Semitic Hate's user avatar
0 votes
1 answer
233 views

How and what can attackers use Rogue AP attacks for? [closed]

I have some questions about rogue access points. How attackers can get victim's creds over secured HTTPS websites? Can attackers do this kind of attack only by using basic tools + sharing the AP ...
9ys's user avatar
  • 36
0 votes
0 answers
179 views

Man in the middle after evil twin

I've set up an Evil twin access point using the aircrack suite, what i'm missing is how to complete the man in the middle access point side like the picture shown below, I've been suggested ettercap ...
user229412's user avatar
1 vote
2 answers
771 views

Capturing cleartext authentication (EAP-TTLS/PAP) with WPA-2 Enterprise?

I am running an evil twin attack with eaphammer, by default it seems to capture mschapv2 authentication which contains the username and NETNTLM hashes. I have manually created a WiFi connection (on ...
Anderson's user avatar
  • 495
2 votes
2 answers
336 views

WPA2 Enterprise: no risks for preconfigured clients when it comes to Rogue APs?

We are using, as default, PEAP and MS-CHAPv2 as inner authentication. I was concerned with security risks when it comes to rogue APs but a colleague told me that there are no risks for preconfigured ...
Jade Kush's user avatar
0 votes
0 answers
36 views

evil twin like attack [duplicate]

Is it possible to make a fake AP with the same SSID that has a password and when clients try to access it and type a password, the software verifies it with a handshake?
Mircea Precup's user avatar
3 votes
1 answer
3k views

Can you detect a wifi pineapple or rogue AP with MAC address?

This posting has some good advice for tracking rogue access points: Tracking down a rogue access point The issue I have is that many will not work for a huge deployment. I'd like to build a device ...
bashCypher's user avatar
  • 1,885
24 votes
2 answers
7k views

Rude neighbor with PineAP or something similar

For the past week or so I've been having problems with wifi in my house, and it appears that my neighbor set up a Pineapple or something similar that is running a known beacon attack and/or Karma/...
user15741's user avatar
  • 340
1 vote
0 answers
293 views

Can not create an "evil twin access point" with the same SSID as the original

I am practising pen-testing for a while now and I have a kali Linux 2017.2 physical machine. I tried to create an evil twin access point using tools like fluxion, wifiphisher and wifi-pumpkin. Note ...
Penguin's user avatar
  • 11
2 votes
1 answer
239 views

Find rogue access point if area is saturated with networks

What do you do if you scan for rogue Access Points and find that the area is saturated by surrounding businesses with their own wifi? I recently scanned for wifi networks and found 60+ networks just ...
sames's user avatar
  • 23
16 votes
2 answers
5k views

How does WPA2-PSK prevent evil twin password phishing?

Let's say we have a WPA2-PSK secured AP and there are several clients like smartphones and notebooks that automatically connect to it. Now if someone was to create another AP that looked completely ...
Forivin's user avatar
  • 1,019